REACTOR SAFETY SYSTEM FAILURES IN HISTORICAL SEVERE ACCIDENTS: ARE DIVERSE ACTUATION SYSTEMS BARKING UP THE WRONG TREE?

摘要

Diverse actuation systems are an attempt to cope with unknown unknowns that may lead to commoncause failure in the design of I&C safety systems in nuclear power plants. The diverse systems protectagainst postulated common cause failures internal to I&C safety system design, but are these really themost likely hazard?The intent of this paper is not to fully answer that question, but to begin a discussion of whetherdiverse actuation systems are the best way to address the unknown unknowns.Appendix 1 of this paper examines 19 severe accidents to identify the causes for safety systemfailures or late action that contributed to the events that resulted in significant core damage, as well as hecontributions of diverse functions where such features played a role in the accidents.The paper also explores:1. The role modern diverse systems might have played had they existed during the 19 events,and2. Potential alternatives to diverse actuation systems.